Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/7KfLp6tWihAhdW_ZCJGaxH-KxhA.roa
File: 7KfLp6tWihAhdW_ZCJGaxH-KxhA.roa (raw, json)
Hash identifier: TNNFwSmMyWVi4jN+jvMQ3wmmO3p3q2BXU7y9CZpeBFo=
Subject key identifier: EC:A7:CB:A7:AB:56:8A:10:21:75:6F:D9:08:91:9A:C4:7F:8A:C6:10
Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Certificate serial: 0194228E2C80BFAF44A6F97C82E028790329
Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/7KfLp6tWihAhdW_ZCJGaxH-KxhA.roa
Signing time: Wed 01 Jan 2025 15:48:50 +0000
ROA not before: Wed 01 Jan 2025 15:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 77.74.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2c:80:bf:af:44:a6:f9:7c:82:e0:28:79:03:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda
Validity
Not Before: Jan 1 15:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eca7cba7ab568a1021756fd908919ac47f8ac610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:80:59:c6:5f:7e:e4:74:7b:49:ae:18:50:f2:
7f:20:43:bb:f3:b8:de:89:ff:68:81:a8:de:15:63:
6f:97:92:58:f7:bd:e9:11:5c:16:78:5a:71:f5:a5:
a8:ad:7f:9e:d8:94:34:01:17:7f:f7:82:98:91:88:
8c:7d:40:b5:c4:48:2a:4a:f5:31:9e:b1:44:ed:f3:
a0:69:2f:a5:44:90:e6:c4:c3:45:d2:66:92:8e:21:
a7:68:92:e8:f6:ba:c2:d6:d2:18:36:9b:cc:26:0c:
8d:11:d4:72:d1:1b:56:e3:9a:c9:1c:45:c5:aa:61:
72:72:63:e6:87:dd:27:a2:20:70:41:98:a2:5e:f5:
8b:4c:90:83:62:7e:37:9e:a0:d9:fe:67:fc:7d:65:
79:93:5c:8d:44:2a:6d:f4:e4:6b:e1:58:0b:41:d9:
22:ea:ab:66:de:9a:f9:e9:13:47:88:72:99:a8:f4:
62:cc:c8:f1:bf:e7:b9:91:51:81:cb:14:32:fb:62:
77:3d:03:a4:29:38:a4:e1:99:bc:2c:89:15:f1:b8:
9d:1c:25:6c:2d:dd:71:3b:2e:fb:d6:14:0e:cc:c5:
e9:03:00:95:8f:2c:68:d2:43:b7:2f:54:c4:8a:da:
ac:bd:80:b0:33:b2:c1:64:fc:a5:48:7f:7e:e8:95:
b2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A7:CB:A7:AB:56:8A:10:21:75:6F:D9:08:91:9A:C4:7F:8A:C6:10
X509v3 Authority Key Identifier:
keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/7KfLp6tWihAhdW_ZCJGaxH-KxhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.74.225.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:4b:40:3c:d4:42:ec:6f:dc:2f:4d:e4:f8:a6:4f:11:f4:03:
80:50:ed:2f:be:11:21:5d:be:d3:bb:1e:6d:e2:56:48:88:8e:
a6:82:ed:a6:ff:d4:ec:0a:3d:f3:4e:fa:dc:4a:1d:69:2c:00:
fe:38:d7:79:ee:66:a3:a5:6a:50:60:d5:04:8e:7d:ce:2f:15:
05:e4:00:41:bc:53:c6:12:0d:f0:c2:dc:b9:92:45:34:fb:94:
8a:fa:4a:8a:05:16:e3:27:00:8d:e8:7d:9e:36:c5:c4:25:25:
64:28:17:d8:e0:de:90:29:12:f5:b8:22:b9:68:3e:8b:9d:38:
da:d7:f5:23:aa:44:74:d9:d6:9d:2f:0e:54:21:2f:f6:19:69:
ae:79:bf:9c:fb:5b:8a:85:c2:57:cb:70:e0:c6:c5:7d:c6:3e:
0c:c0:ca:e3:a0:3d:c2:95:ee:a3:90:4d:2b:9d:47:74:d9:4b:
d3:82:99:92:c4:31:62:bd:b4:dc:90:e8:9b:69:73:48:8c:af:
05:da:21:74:37:a8:aa:59:de:56:57:b0:c5:82:cd:9c:11:35:
d9:ff:48:4a:d4:f9:3b:83:02:99:79:e3:36:cc:e9:ee:cf:43:
79:30:93:60:5f:87:38:38:aa:aa:30:9d:cc:8f:86:60:0a:c3:
d7:a5:08:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijiyAv69Epvl8guAoeQMpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm
NjljZGEwHhcNMjUwMTAxMTU0ODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2E3Y2JhN2FiNTY4YTEwMjE3NTZmZDkwODkxOWFjNDdmOGFjNjEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuYBZxl9+5HR7Sa4YUPJ/IEO787je
if9ogajeFWNvl5JY973pEVwWeFpx9aWorX+e2JQ0ARd/94KYkYiMfUC1xEgqSvUx
nrFE7fOgaS+lRJDmxMNF0maSjiGnaJLo9rrC1tIYNpvMJgyNEdRy0RtW45rJHEXF
qmFycmPmh90noiBwQZiiXvWLTJCDYn43nqDZ/mf8fWV5k1yNRCpt9ORr4VgLQdki
6qtm3pr56RNHiHKZqPRizMjxv+e5kVGByxQy+2J3PQOkKTik4Zm8LIkV8bidHCVs
Ld1xOy771hQOzMXpAwCVjyxo0kO3L1TEitqsvYCwM7LBZPylSH9+6JWy0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOyny6erVooQIXVv2QiRmsR/isYQMB8GA1UdIwQY
MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt
ZGQyOTRjMzc4ZjZjLzEvN0tmTHA2dFdpaEFoZFdfWkNKR2F4SC1LeGhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj
LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATUrhMA0G
CSqGSIb3DQEBCwUAA4IBAQCOS0A81ELsb9wvTeT4pk8R9AOAUO0vvhEhXb7Tux5t
4lZIiI6mgu2m/9TsCj3zTvrcSh1pLAD+ONd57majpWpQYNUEjn3OLxUF5ABBvFPG
Eg3wwty5kkU0+5SK+kqKBRbjJwCN6H2eNsXEJSVkKBfY4N6QKRL1uCK5aD6LnTja
1/UjqkR02dadLw5UIS/2GWmueb+c+1uKhcJXy3DgxsV9xj4MwMrjoD3Cle6jkE0r
nUd02UvTgpmSxDFivbTckOibaXNIjK8F2iF0N6iqWd5WV7DFgs2cETXZ/0hK1Pk7
gwKZeeM2zOnuz0N5MJNgX4c4OKqqMJ3Mj4ZgCsPXpQjl
-----END CERTIFICATE-----
Generated at Sat Apr 5 15:31:09 2025 by rpki-client